(afaik) This (rather expensive) “protection” is needed because Mullvad is going all-in on WireGuard. OpenVPN, for instance, doesn’t need these?
Proton has credential-less mode live on Android, which is similar to Mullvad’s (and Windscribe’s?) implementation. Things are moving in the right direction.
Doubt that.